home

MTAppDwn.exe

MEDITECHAppDwnld

Medical Information Technology, Inc.

It runs as a separate (within the context of its own process) windows Service named “MEDITECH Application Manager”.
Publisher:
Medical Information Technology, Inc.  (signed and verified)

Product:
MEDITECHAppDwnld

Description:
MEDITECH Application Manager

Version:
1, 0, 0, 44

MD5:
494830659337bdc68642ebfc7bf066d0

SHA-1:
dc4e8a9779c41e2c8666a567db4efb47582f58ad

SHA-256:
0469fd6cb008ef22361488abaec5a627ad41f8cb763f999a894697415eb73b3a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 2:06:15 PM UTC  (today)

File size:
126 KB (128,984 bytes)

Product version:
1, 0, 0, 44

Copyright:
Copyright © 2008

Original file name:
MTAppDwn.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\meditech\mtappdwn.exe

Digital Signature
Signed by:
Medical Information Technology, Inc.

Authority:
VeriSign, Inc.

Valid from:
8/26/2008 8:00:00 PM

Valid to:
10/2/2010 7:59:59 PM

Subject:
CN="Medical Information Technology, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Medical Information Technology, Inc.", L=Westwood, S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1DA8BAE60FA92BF34A11A0E247162A4C

File PE Metadata
Compilation timestamp:
11/20/2008 2:41:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
1536:FPWv/7ZwofzBn1Ovwx3FXMu0Hks/9pltHnl5PdSkgwwxBz8k97dCrb+qj4C:FwJfzdMvwrxiLrNSZb/arb+qt

Entry address:
0x6EF7

Entry point:
55, 8B, EC, 83, C4, 9C, 56, 57, 53, 55, 53, E8, A1, 17, 01, 00, 5B, A3, 60, FE, 41, 00, A3, 6C, FE, 41, 00, 53, E8, 0E, 18, 01, 00, 5B, 8B, F0, 53, 68, C4, 63, 42, 00, 56, E8, 85, 13, 00, 00, 5B, E8, 7F, 26, 00, 00, BE, C4, 63, 42, 00, 0F, B6, 06, 46, 3C, 22, 75, 0A, 0F, B6, 06, 46, 3C, 22, 75, F8, EB, 08, 0F, B6, 06, 46, 3C, 20, 77, F8, 0F, B6, 06, 46, 3C, 20, 74, F8, 4E, 89, 35, 34, 72, 42, 00, C7, 05, A0, 61, 42, 00, 00, 00, 00, 00, 83, F8, FF, 74, 19, 0F, B6, 06, 3C, 20, 75, 03, 46, EB, F6, 3C, 2D, 74...
 
[+]

Entropy:
6.3145

Developed / compiled with:
Microsoft Visual C++

Code size:
96.5 KB (98,816 bytes)

Service
Display name:
MEDITECH Application Manager

Service name:
MTAppManager

Description:
MEDITECH Application Management Service Facilitates running the MEDITECH client software on Microsoft Windows Vista and Microsoft Windows Server 2008 operating systems. If this service is stopped, th

Type:
Win32OwnProcess


Scan MTAppDwn.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.